Your information, handled with care.

1. Who we are

Creaturae is a trauma-informed somatic coaching practice run by Deborah Lee as a sole proprietor, based in New York City and working with clients around the world.

Under data protection law, Deborah Lee, trading as Creaturae, is the data controller. That simply means we're the ones who decide how and why your personal information is used, and we're responsible for looking after it.

In this policy, "Creaturae," "we," and "us" mean the practice, and "you" means anyone who visits creaturae.org, gets in touch, subscribes to our newsletter, or works with us. If anything here is unclear, just email [email protected]. We're happy to explain.

2. What we collect

We only ask for what we need to respond to you and support you well.

• When you get in touch: your name, email address, and whatever you choose to share in your message.
• When you book a call or session: your name, email, phone number if you give it, the time you choose, and any answers you share on the booking form.
• When you pay: your billing details go directly to our payment processor. We never see or store your full card number.
• When you subscribe to Attuned: your email address and, if you share it, your name, along with standard email data such as whether a newsletter was opened or a link clicked.
• During coaching: information about your physical and emotional well-being, such as your goals, the themes and practices we explore together, and how you respond during somatic exercises. This is sensitive personal information about your emotional well-being and physical awareness, so we handle it with extra care (see section 3).
• When you browse the site: basic technical information such as your browser, device, the pages you visit, and your approximate location, collected through cookies or similar tools (see section 7).

3. Why we're allowed to use your information

Data protection law asks us to have a clear, lawful reason for each way we use your information. Here's ours:

You can withdraw your consent at any time by emailing [email protected]. If you withdraw consent for us to hold sensitive personal information about your emotional well-being and physical awareness shared during coaching, we won't be able to continue coaching together, but withdrawing doesn't affect anything we did with your information before that point.

4. How we use your information

• To reply to your messages and arrange calls and sessions.
• To deliver coaching, group sessions, workshops, and speaking engagements.
• To process payments and keep the business records we're required to keep.
• To send you the Attuned newsletter, if you've subscribed.
• To understand how the website is used, so we can keep improving it.

We never sell your personal information, and we never use it for third-party advertising.

5. Confidentiality of coaching

Coaching only works when you feel safe to be honest. What you share in coaching stays between you and Deborah, and we won't share session content with anyone without your written permission.

There are a small number of exceptions, which exist to keep people safe:

• If there is a serious and imminent risk of harm to you or someone else.
• If we're required to disclose it by law, subpoena, or court order.
• If there is suspected abuse or neglect of a child or vulnerable adult.

In group sessions, everyone agrees to keep what others share confidential. We can't guarantee how other participants behave, though, so please share at whatever level feels right for you.

6. Services we rely on

We use a small number of trusted providers to run the practice. They only use your information to provide their service to us:

• Simply Schedule Appointments and Google Calendar for booking and scheduling.
• Stripe for payments.
• Mailchimp for the Attuned newsletter.
• Email and video-call providers for communication and online sessions.
• Our website host, and any analytics tools used on the site.

Each provider has its own privacy policy. Where data protection law requires it, we have data processing agreements in place with them.

7. Cookies

Cookies are small files a website saves in your browser. We may use them for basic functions, such as remembering your preferences, and for analytics that help us understand how people use the site.

Essential cookies, the ones the site needs to work, are set automatically. Non-essential cookies, such as analytics, are only set with your consent where the law requires it. If you're visiting from the UK or the EU and we use non-essential cookies, we'll ask you to accept or decline them first.

You can also block or delete cookies at any time in your browser settings. Some features, such as booking, may not work fully without them.

8. How long we keep information

We only keep your information for as long as there's a good reason to:

After that, your information is deleted or anonymized. You can unsubscribe from the newsletter at any time using the link at the bottom of every email.

9. Your choices and rights

Your information belongs to you. You can ask us to:

• Show you the personal information we hold about you.
• Correct anything that's inaccurate.
• Delete your information, unless we're legally required to keep it.
• Stop sending you marketing emails.
• Limit how we use your information while a concern is being sorted out.
• Give you a copy of your information in a format you can take elsewhere.
• Stop using your information where we rely on legitimate interests.

Depending on where you live, you may have additional rights under local law:

UK and EU residents: you have rights under the UK GDPR and EU GDPR, including those listed above, and the right to complain to your local data protection authority. In the UK, that's the Information Commissioner's Office at ico.org.uk. In the EU, you can find your local authority at edpb.europa.eu.

California residents: you may have rights under California privacy law, including the right to know what information we collect about you and to ask us to delete it.

To make any of these requests, email [email protected]. We'll respond within 30 days.

10. Security

We take reasonable technical and practical steps to protect your information, including password-protected accounts and reputable, encrypted service providers. No way of sending or storing information online is completely secure, so we can't promise absolute security, but we take it seriously.

11. International clients

Creaturae is based in the United States. If you work with us from another country, your information will be transferred to and processed in the United States.

To protect it when that happens:

• Our service providers, such as Stripe, Mailchimp, and Google, take part in the UK-US Data Bridge and/or the EU-US Data Privacy Framework, or use standard contractual clauses approved by the relevant authorities, to protect information transferred from the UK or EU.
• For information we hold directly, such as coaching notes and emails, the transfer is necessary to provide coaching to you and, where applicable, you give your explicit consent to it when you choose to work with us.

If you have any questions about how your information is transferred, please get in touch at [email protected].

12. Children

Our services and website are intended for adults. We don't knowingly collect personal information from anyone under 18.

13. Changes to this policy

We may update this policy from time to time. When we do, we'll change the date at the top of this page, and we'll let active clients and newsletter subscribers know about any significant changes.

14. Contact

Questions, requests, or concerns are always welcome.

Deborah Lee, trading as Creaturae
New York, NY
[email protected]